Posts

Unable to connect to Wireless profile being pushed using GPO

Image
Today , some laptop users started reporting as they are unable to connect to ‘Wireless profile’ after SCEP installation has taken place. I found, most of the laptop users were having this issue. I immediately uninstalled SCEP but that didn’t help , tried removing Wi-Fi profiles under the path ‘C :\ProgramData\Microsoft\Wlansvc\Profiles\Interfaces\ Interface’ but that didn’t help too. Error - When checking event viewer, the only error that showed up is as follows 5 times in a row.          “Error skipping EAP method DLL path name validation failed. Error: typeId=25, authorId=0,vendorId=0,vendorType=0”, This error indicates a registry or missing corrupt file issue. ‘ EAPHost is a Microsoft Windows Networking component that provides an Extensible Authentication Protocol (EAP) infrastructure for the authentication of following protocols such as   802.1X   and   Point-to-Point (PPP). Cause - Symantec didn’t uninstall properly caused this issue. Resolution – After chec

Half of clients report: MP has rejected registration request due to failure in client certificate - SCCM 2012 R2

Image
Reference -  http://windowsitpro.com/security/q-there-easy-way-automatically-re-enroll-certificate-holders-received-certificate-old-ca-ne https://social.technet.microsoft.com/Forums/en-US/8d98726d-4f8f-4866-a91a-724c4ffbfdd1/mp-has-rejected-registration-request-due-to-failure-in-client-certificate   Recently we moved our Certification Authority to Windows Server 2012 , subsequently migrating hashing algorithm from sha1 to sha2. After some days we started witnessing above issue on SMS_MP_Control_Manager componet. Even though we had replaced the New Root CA cert on sccm site settings. Error:-  MP has rejected registration request due to failure in client certificate Solution :-  All ConfigMgr certificates and machine certificates on clients were supposed to re-enrolled.  To force all holders of a particular certificate to automatically enroll for a replacement certificate issued by a CA , used the Reenroll all Certificate Holders feature of the Certificate Templates MMC snap-in.

How to Enable Multiple Concurrent User in Remote Desktop Windows 7

Links: 1.  http://forum.sambapos.com/t/step-by-step-on-how-to-configure-multiple-concurrent-rdp-clients-to-run-sambapos-iphone-ipad-galaxy-tablet/769 2.  http://www.nextofwindows.com/how-to-enable-multiple-concurrent-user-in-remote-desktop-windows-7/

MP has rejected registration request due to failure in client certificate

Image
Issue:- We have System Center Configuration Manager 2012 R2 deployed on Windows Server 2008R2 host. Recently we have moved our Certification Authority to Windows Server 2012 , renewed Root CA Certificate and intermediate Certificates also migrated Hashing algorithm from 'sha1' to 'sha2'  . New Root CA and intermediate CA also present on client machines and on SCCM. However, i have discovered these errors on MP: MP has rejected registration request due to failure in client certificate (Subject Name: ) chain validation. If this is a valid client ,  Even though Newly imaged machines are getting SCCM client installed but won't see all the client cycle under 'Actions tab' and also  'client certificate shows "None".  The operating system reported error 2148204809: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.  Solution:- Register  new Certificate of Root CA    under SCCM20

The task sequence cannot be run because the program files cannot be located

Image
When starting deployment on Site servers deployment fails with the following error:  Failed to run Task sequence . The task sequence cannot be run because the program files for ******** cannot be located on a distribution point. For more Information, contact your System Administrator or Helpdesk Operator. Check following steps to troubleshoot the issue: -Check if boundary groups are connected to site servers and boundaries are set -Redistribute and Validate the ConfigMgr client package on multiple site servers (multiple times) -Check if VLAN communication is working on security, firewall and access control list The following errors are seen in SMSTS.log -Content location request for PR100003:3 failed. (Code 0x80040102) -Failed to resolve PackageID=<?> -Failed to resolve selected task sequence dependencies. Code(0x80040102) -ThreadToResolveandExecuteTaskSequence failed. Code(0x80040102) Reference  : http://henkhoogendoorn.blogspot.in/2015/04/the-task-sequence-ca

How to Issue A certificate in Certificate Authority server?

Image
How to Issue A certificate in Certificate Authority server? 1) Start MMC Tool Click Start -> Run -> Entry MMC and click 'OK' 2) Click File -> Add/Remove SnapIn... 3) Add Certificate Authority Select 'Certificates Authority' in left panel and click 'Add' to move to right panel , Then Click 'OK' 4) Click Next 5) Issue The Certificate A. Expand 'Certification Authority' Node; B. Expend 'DBM-CA' C, Click 'Pending Requests' B. In right panel, Right click Request ID -> Issue. 6) Done Now you can Install certificate from http://*.*.*.*/certsrv

RPC Server Unavailable trying to connect to CA

Issue -  Unable to connect to a CA using certificate authority console. Description   - Recently, we build up a new Standalone CA. We wanted to delegate  'cert issuing' task to Help desk Team but whenever we were trying to connect to this CA console using desktop CA console, we were encountering below error. Along with above issue, neither of us were able to connect to any of the services like connecting to C drive, remote registry etc.  Error  - RPC Server Unavailable error 0x6a (WIN32: 1722) Tried  - 1. Tried disabling 'windows firewall', didn't work             2.  Tried starting remote procedure call locator service, did not work.             3.   Sometimes event 13 with "Server RPC is unavailable" means “access is denied”. A possible cause of this issue is that one of the following objects is not added to the Built-in\Users group: ·         NT AUTHORITY\Authenticated Users ·         NT AUTHORITY\INTERACTIVE ·         Domain U